Tuesday, April 29, 2014

SSL Encryption Isn't Magical Security Dust

SSL encryption isn't magical security dust that solves all security problems. It does a pretty good job of preventing legitimate visitor's data from getting leaked to malicious 3rd parties, but it does absolutely nothing to protect a website against a malicious visitor. Sears clearly needs a better way to handle website vulnerability reports.